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Description 

Device and method for parameterizable controlling 

The present invention relates to a control device having a 
plurality of inputs for respectively receiving an input real 



value, a plurality of outputs for respectively outputting a 
digital output value, a memory for storing setpoint values 
relating to the inputs and outputs, and an allocator for 
allocating a digital output value to one of the digital outputs 
as a function of a comparison of at least one of the input real 
values with a corresponding setpoint value. The present 
invention also relates to a corresponding method for 
controlling equipment . 

In many applications of control technology, outputs Yj are 
switched on or off as a function of inputs Xi . A control device 
is in this case characterized by the number of outputs j max and 
the number of inputs i max . With respectively two inputs and 
outputs, i.e. j max = 2 and imax = 2, sixteen different states are 
in principle conceivable. Correspondingly for controllers with 
eighteen input and outputs, which are widely used in control 
technology, more than 260,000 different states are already 
possible . 

In equipment produced to date, all the inputs and outputs are 
evaluated by programmed technology. This, however, presents the 
following disadvantages with an increasing number of inputs and 
outputs (IOs) : There is a great need for ROM and RAM. 
Furthermore, the parameterization table which increases 
exponentially in size requires a very large EE PROM, long 
reading times etc. The large number of states furthermore 
requires very complex parameterization and entails very long 
runtimes. Especially for safety technology, the latter is a 
great problem as regards emergency stop reaction times and 
maximum test times for the second fault occurrence time. 
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A controller of this high complexity is known, for example, 
from Pilz under the reference "PNOZ MULT I " . A large part of the 
logic is in this case embodied in hardware. This is 
correspondingly configured extensively owing to redundancy and 
diversity, associated with an SFF level of more than 90% for 
the KAT4 safety standard. Two different controller types are in 
this case used with different firmware. The purpose of this is 
that the faster controller carries out the control functions 
and the slower controller is used for the monitoring. 

For their part, the present Applicant sells safety equipment of 
the Siguard series on the market, which makes do with one 
firmware and one controller type, although master-slave 
operation is necessary in which both controllers execute all 
the control functions and therefore in principle require double 
the runtime compared with the aforementioned equipment. This 
disadvantage must be compensated for by a high-performance 
algorithm. 

It is therefore an object of the present invention to provide a 
less elaborate controller and a corresponding method for safety 
technology . 

According to the invention, this object is achieved by a 
control device having a plurality of inputs for respectively 
receiving an input real value, a plurality of outputs for 
respectively outputting a digital output value, a memory for 
storing setpoint values relating to the inputs and outputs, and 
an allocator for allocating a digital output value to one of 
the digital outputs as a function of a comparison of at least 
one of the input real values with a corresponding setpoint 
value, wherein an independence state value can be applied to at 
least one of the setpoint values in the memory, and the 
allocation of a digital output value 
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to one of the digital outputs can be carried out by the 
allocator independently of the at least one input real value 
whose allocated setpoint value has the independence state 
value . 

The invention also relates to a method for controlling 
equipment by receiving a plurality of input real values, 
providing setpoint values relating to inputs and outputs, 
establishing a digital output value as a function of a 
comparison of at least one of the input real values with a 
corresponding one of the setpoint values, outputting the 
digital output value, applying an independence state value to 
at least one of the setpoint values, and establishing the 
digital output value independently of the at least one input 
real value whose allocated setpoint value has the independence 
state value. 

In safety technology, the error susceptibility and 
verif iability of the algorithm are of prime importance. If the 
computing outlay is reduced according to the invention, a 
reliable control function can therefore be readily achieved in 
master-slave operation . 

The control device according to the invention may comprise a 
first evaluator for converting input raw values into digital 
input values for the further processing as input real values. 
This makes it possible, for example, to classify analog input 
signals as an active or inactive input. 

A second evaluator may furthermore be provided in the control 
device, which is connected downstream of the first evaluator. 
This allows the digital input values to be allocated to logical 
input states for the further processing as input real values. 

Preferably, the setpoint values respectively have one of the 
state values 1, 0 and independence state value. In this way, 
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for example, it is possible to produce the binary states "TRUE" 
and "FALSE" as well as a state which is insignificant for the 
output result. 

A plurality of sets of setpoint • values are preferably stored 
respectively for an output value or set of output values in the 
memory. In this way, a plurality of parameterizations can be 
stored simultaneously in the equipment. 

The control device according to the invention may have a safety 
instrument by which the equipment to be controlled can be 
switched to a safety state. For example, it may be switched to 
the safety state if the output real values deviate from the 
corresponding setpoint values for more than a predetermined 
time. In a special example of this, the control device may 
comprise two controllers which both execute the algorithm and 
store all fulfilled parameterizations as well as the output 
vector Yj in binary form. These stored values are compared in 
each cycle. If they deviate for a time which is longer than a 
predetermined maximum time, then the equipment to be controlled 
is switched to a safe state. 

The safety device may be optimized by checking the sets of 
setpoint values with a check sum at fixed time intervals. In 
particular, a setpoint value matrix i.e. a fixed 
parameterization, which is stored in the memory, may be secured 
by a cyclic CRC (cyclic redundancy check sum) and verified at 
fixed time intervals in order to discover errors in the matrix 
S or in the memory. In this way, a variable function can be 
checked for errors straightforwardly. 

The present invention will now be explained in more detail with 
the aid of the appended drawings, in which: 
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FIG 1 shows an outline flow chart of the preprocessing of the 
input real values ; and 

FIG 2 shows a logic diagram for the allocation of output states 
according to the invention. 

The exemplary embodiments described in detail below represent 
preferred embodiments of the present invention. 

The outputs Y of the control-safety equipment are the result of 
a switching function H with input X: 



The input X, or the plurality of inputs X±, in this case may 
respectively have the following states independently of 
its/ their function : 



In control technology, an active output state Yj is generally 
reached for precisely one or very few input state vectors. For 
most of the input state vectors X±, the output or outputs are 
inactively configured. With uncorrelated inputs, i.e. inputs 
that do not affect one another, for example operating selector 
switch, muting, key switch or the like, there are usually at 
most jmax input state vectors for jma X active outputs Yj . 



Y = H(X) 



0 ("FALSE") 
Xi = 1 ( " TRUE " ) 

D ( " DONTC ARE " ) 



input must be inactive 

input must be active 

input state may be anything 



If the inputs are correlated, however, then: 
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Jtxux 

Number of the active output states 1 

Here, Zi corresponds to the number of correlations of the 
inputs Xi . In the limiting case of uncorrelated inputs, Z = 1 
since the inputs are then only correlated with themselves. 

The evaluation of the inputs is carried out in two stages 

according to this example according to the invention, as 

indicated in FIG 1. Raw input data Ri, for example analog 

signals or digital signals of any level, are first subjected to 

a physical evaluation. Here, for example, the allocation Xi = 1 

§ 

is made when the corresponding input is active, and Xi = 0 when 
the input is inactive. 

In a second step S2 , the digital input values Xi are logically 
evaluated. Each input therefore has a function ID, for example 
IDi = ID_POWERBUTTON. A logical input state or function value 
Fi is assigned to each digital input value Xi . In the example, 
Fi = 1 would apply if the power button has been actuated 
successfully, and Fi = 0 would apply if the power button has 
not been actuated or has not been actuated successfully. 

A logical allocation is carried out in the further step S3, 
each real value Fi being compared with a setpoint value Si. A 
corresponding output value Yj results from this comparison. 
Preferably, the controller is configured so that different 
parameterizations can be stored in it. This means that for all 
the rimax parameterizations, a set of setpoint values Si, n is 
respectively stored. They have the values 



0 ("FALSE") 
S i( n 1 ("TRUE") 

D ( " DONTCARE " ) 



input must be inactive 

input must be active 

input state may be anything 



1 
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FIG 2 shows a flow chart for determining the output states Yj . 
In an initialization step S4, the number of the parameter set 
is put at n = 1 and the output value Yj is put at zero. In a 
further step S5, the logical input states Fi for each 
parameterization n are compared with the allocated threshold 
value Si #n (comparison operator "=="). All the comparisons are 
combined by the AND operator " &&" . If the overall result of the 
comparisons is "TRUE", then the respective output Yj receives 
the value of the logic operation "Yj OR Yj, n " . In this case, Yj, n 
corresponds to the value stored as a setpoint value together 
with Si, n . 

The comparison routine of step S5 is repeated n times according 
to step S6 . After this, the output value assignment is ended 
according to step S7 . 

For each parameterization, the output Yj with Yj, n = 1 may then 
be connected up or activated. Otherwise, the respective output 
Yj is inactive. 

According to the invention, not every real value Fi is compared 
with the corresponding setpoint value S± fTl in step S5 . Rather, a 
comparison is only carried out if the setpoint value Si, n does 
not have the value "D" . This can avoid a multiplicity of 
comparison operations. The total runtime for determining the 
output states is correspondingly reduced. 

If the inputs are mutually independent, for example in the case 
of parallel switches, then the number of parameterizations nmax 
is equal to the total number of outputs jmax- If the inputs are 
dependent on one another, however, for example switches 
connected in series, then two parameterizations may for example 
be necessary for one output. 

In a specific example, eleven independent inputs are applied to 
the controller in order to control four outputs. 
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Accordingly, four different parameterizations must be stored in 
the controller. 



